Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: noLw+5KuzTklxzjYZQcLX+Dla2Tj4hDl6N0ZUq7Oqxw=
Subject key identifier: 4B:56:9F:C8:AB:FB:F8:0F:2D:43:06:3B:04:79:90:31:65:AC:4B:79
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 0196AEB2B429E36C96B38B47949559FDE236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0A87
Signing time: Thu 08 May 2025 07:01:09 +0000
Manifest this update: Thu 08 May 2025 07:01:09 +0000
Manifest next update: Fri 09 May 2025 07:01:09 +0000
Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=)
2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: bUBrqW0AH7DwAz94ByiLKUBNlWbp4a5nAvZXKWDu+BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:b4:29:e3:6c:96:b3:8b:47:94:95:59:fd:e2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: May 8 07:01:09 2025 GMT
Not After : May 9 07:01:09 2025 GMT
Subject: CN=4b569fc8abfbf80f2d43063b0479903165ac4b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:36:6b:36:f1:8a:8d:dc:0b:38:ce:90:a5:
cc:26:86:be:59:22:20:8c:1c:ce:c6:36:66:94:09:
8e:4a:a2:4c:09:2c:f3:8b:87:13:12:25:0d:af:54:
b4:79:a1:43:70:39:03:96:1a:af:ec:d5:67:78:d6:
9a:e7:c3:a5:4f:b8:8d:a9:58:27:bf:cd:c7:f1:7b:
e5:3d:f1:7e:2c:6c:87:27:e8:09:bd:22:5a:bf:6d:
09:12:8e:35:0b:f8:85:15:58:e3:9f:af:ae:05:e4:
aa:bb:22:e8:3d:fb:b8:e1:7c:36:f4:8c:ce:60:06:
48:98:75:4c:67:91:db:a8:cb:d1:3e:f5:b7:e2:fe:
3c:b0:ee:73:ef:e4:5b:70:bd:23:e0:8a:18:eb:5b:
d5:fb:75:1a:b4:79:3f:32:1e:e2:2b:8a:e5:b2:0a:
73:78:31:dc:49:6a:8a:f3:ca:35:b9:42:7e:8d:48:
c3:60:7a:32:27:a5:20:d6:e3:99:c9:ec:e3:12:ed:
5d:9a:38:64:e8:79:28:83:e3:73:f2:a0:b6:50:f3:
7d:f5:fa:5e:0e:ec:ca:97:62:78:02:97:82:93:39:
a4:c1:fa:8b:c4:4d:81:a7:b2:2f:b6:d8:e8:d9:2e:
e8:b7:e4:eb:0a:1c:4f:75:ed:d2:70:47:af:a7:ad:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:9F:C8:AB:FB:F8:0F:2D:43:06:3B:04:79:90:31:65:AC:4B:79
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:65:b3:64:dd:9f:65:6a:75:a1:27:b3:bf:5b:37:08:1b:e4:
10:0a:08:31:da:2d:cb:57:f2:6d:65:24:cf:f3:a7:ff:21:6e:
43:4f:a6:cf:38:30:a0:e2:be:10:7b:b7:23:97:11:08:93:11:
22:4f:da:e5:fc:bc:f9:71:8b:73:44:f5:0e:42:72:01:7b:e4:
61:10:c1:82:6e:74:ad:6d:ac:23:3b:76:d6:e2:f2:6c:82:a5:
55:e4:68:06:fd:9e:ba:21:ad:09:f3:ac:22:ff:92:44:11:dd:
0c:11:3c:ad:77:23:fa:21:47:af:e0:35:2e:49:f0:8a:af:0e:
ac:95:d1:49:c9:af:30:9b:f6:7f:e3:7e:73:53:ba:71:60:e4:
ba:13:94:df:1f:bf:0a:ae:91:88:3d:6a:8b:e9:9f:a1:67:4f:
3d:15:02:2b:bc:a5:a7:aa:cf:9a:48:ef:26:e6:63:2f:1b:98:
f0:29:d8:67:0a:be:89:59:4e:9d:9a:6d:13:c6:1a:c8:b7:e7:
9f:ae:1d:b1:b7:46:6e:68:ee:6d:b8:2f:66:4c:ce:6e:50:64:
cb:bd:10:a5:51:59:f0:6f:b2:3a:c4:c2:b1:2f:5b:de:49:42:
33:26:6c:ac:d4:78:1c:ca:33:a4:34:41:d8:82:d3:95:da:b5:
5a:23:ac:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:27:18 2025 by rpki-client